CNIL : guide sécurité des données #3298
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Functional Tests | |
| on: | |
| pull_request: | |
| branches: [main, develop] | |
| types: [opened, synchronize] | |
| workflow_dispatch: | |
| env: | |
| GITHUB_WORKFLOW: github_actions | |
| backend-directory: ./backend | |
| frontend-directory: ./frontend | |
| enterprise-backend-directory: ./enterprise/backend | |
| enterprise-frontend-directory: ./enterprise/frontend | |
| enterprise-frontend-build-directory: ./enterprise/frontend/.build/frontend | |
| enterprise-backend-settings-module: enterprise_core.settings | |
| DEBUG: pw:webserver | |
| jobs: | |
| functional-tests: | |
| runs-on: ubuntu-20.04 | |
| services: | |
| postgres: | |
| image: postgres:14.1 | |
| env: | |
| POSTGRES_USER: postgres | |
| POSTGRES_PASSWORD: postgres # test credential | |
| POSTGRES_DB: postgres | |
| ports: ["5432:5432"] | |
| options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5 | |
| mailhog: | |
| image: mailhog/mailhog | |
| ports: ["1025:1025", "8025:8025"] | |
| strategy: | |
| max-parallel: 4 | |
| matrix: | |
| python-version: ["3.11"] | |
| playwright-browser: ["chromium"] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up python ${{ matrix.python-version }} | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| cache: "pip" | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: latest | |
| - name: Install Poetry | |
| uses: snok/install-poetry@v1 | |
| with: | |
| virtualenvs-create: false | |
| installer-parallel: true | |
| - name: Install backend requirements | |
| working-directory: ${{ env.backend-directory }} | |
| run: poetry install | |
| - name: Install dependencies | |
| working-directory: ${{ env.frontend-directory }} | |
| run: | | |
| npm install -g pnpm | |
| pnpm i --frozen-lockfile | |
| - name: Install Playwright browser ${{ matrix.playwright-browser }} | |
| working-directory: ${{ env.frontend-directory }} | |
| run: pnpm exec playwright install --with-deps ${{ matrix.playwright-browser }} | |
| - name: Create frontend environment variables file | |
| working-directory: ${{ env.frontend-directory }} | |
| run: | | |
| touch .env | |
| echo PUBLIC_BACKEND_API_URL=http://localhost:8000/api >> .env | |
| - name: Create backend environment variables file | |
| working-directory: ${{ env.backend-directory }} | |
| run: | | |
| touch .env | |
| echo LOG_LEVEL=DEBUG >> .env | |
| echo LOG_OUTFILE=ciso-assistant.log >> .env | |
| echo DJANGO_DEBUG=True >> .env | |
| echo [email protected] >> .env | |
| echo DJANGO_SUPERUSER_PASSWORD=1234 >> .env | |
| echo POSTGRES_NAME=postgres >> .env | |
| echo POSTGRES_USER=postgres >> .env | |
| echo POSTGRES_PASSWORD=postgres >> .env | |
| echo DB_HOST=localhost >> .env | |
| echo CISO_ASSISTANT_SUPERUSER_EMAIL='' >> .env | |
| echo CISO_ASSISTANT_URL=http://localhost:4173 >> .env | |
| echo DEFAULT_FROM_EMAIL='[email protected]' >> .env | |
| echo EMAIL_HOST=localhost >> .env | |
| echo [email protected] >> .env | |
| echo EMAIL_HOST_PASSWORD=password >> .env | |
| echo EMAIL_PORT=1025 >> .env | |
| - name: Run migrations | |
| working-directory: ${{ env.backend-directory }} | |
| run: | | |
| export $(grep -v '^#' .env | xargs) | |
| poetry run python manage.py makemigrations | |
| poetry run python manage.py migrate | |
| - name: Start test server | |
| working-directory: ${{ env.backend-directory }} | |
| run: | | |
| export $(grep -v '^#' .env | xargs) | |
| poetry run python manage.py createsuperuser --noinput | |
| nohup poetry run python manage.py runserver & | |
| - name: Build frontend | |
| working-directory: ${{ env.frontend-directory }} | |
| run: pnpm run build | |
| - name: Run tests with browser ${{ matrix.playwright-browser }} | |
| working-directory: ${{ env.frontend-directory }} | |
| run: pnpm exec playwright test --project=${{ matrix.playwright-browser }} | |
| env: | |
| CI: true | |
| - uses: actions/upload-artifact@v4 | |
| if: always() | |
| with: | |
| name: functional-tests-report-${{ matrix.playwright-browser }} | |
| path: | | |
| ${{ env.backend-directory }}/*.log | |
| ${{ env.frontend-directory }}/tests/results/ | |
| ${{ env.frontend-directory }}/tests/reports/ | |
| retention-days: 5 | |
| enterprise-functional-tests: | |
| runs-on: ubuntu-20.04 | |
| services: | |
| postgres: | |
| image: postgres:14.12 | |
| env: | |
| POSTGRES_USER: postgres | |
| POSTGRES_PASSWORD: postgres | |
| POSTGRES_DB: postgres | |
| ports: ["5432:5432"] | |
| options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5 | |
| mailhog: | |
| image: mailhog/mailhog | |
| ports: ["1025:1025", "8025:8025"] | |
| strategy: | |
| max-parallel: 4 | |
| matrix: | |
| python-version: ["3.11"] | |
| playwright-browser: ["chromium"] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up python ${{ matrix.python-version }} | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| cache: "pip" | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: lts/* | |
| - name: Install Poetry | |
| uses: snok/install-poetry@v1 | |
| with: | |
| virtualenvs-create: false | |
| installer-parallel: true | |
| - name: Install backend requirements | |
| working-directory: ${{ env.backend-directory }} | |
| run: poetry install | |
| - name: Install enterprise backend | |
| working-directory: ${{ env.enterprise-backend-directory }} | |
| run: poetry install | |
| - name: Build enterprise frontend | |
| working-directory: ${{ env.enterprise-frontend-directory }} | |
| run: make | |
| - name: Install Playwright browser ${{ matrix.playwright-browser }} | |
| working-directory: ${{ env.enterprise-frontend-build-directory }} | |
| run: pnpm exec playwright install --with-deps ${{ matrix.playwright-browser }} | |
| - name: Create frontend environment variables file | |
| working-directory: ${{ env.enterprise-frontend-build-directory }} | |
| run: | | |
| touch .env | |
| echo PUBLIC_BACKEND_API_URL=http://localhost:8000/api >> .env | |
| - name: Create backend environment variables file | |
| working-directory: ${{ env.backend-directory }} | |
| run: | | |
| touch .env | |
| echo LOG_LEVEL=DEBUG >> .env | |
| echo LOG_OUTFILE=ciso-assistant.log >> .env | |
| echo DJANGO_DEBUG=True >> .env | |
| echo [email protected] >> .env | |
| echo DJANGO_SUPERUSER_PASSWORD=1234 >> .env | |
| echo POSTGRES_NAME=postgres >> .env | |
| echo POSTGRES_USER=postgres >> .env | |
| echo POSTGRES_PASSWORD=postgres >> .env | |
| echo DB_HOST=localhost >> .env | |
| echo CISO_ASSISTANT_SUPERUSER_EMAIL='' >> .env | |
| echo CISO_ASSISTANT_URL=http://localhost:4173 >> .env | |
| echo DEFAULT_FROM_EMAIL='[email protected]' >> .env | |
| echo EMAIL_HOST=localhost >> .env | |
| echo [email protected] >> .env | |
| echo EMAIL_HOST_PASSWORD=password >> .env | |
| echo EMAIL_PORT=1025 >> .env | |
| echo DJANGO_SETTINGS_MODULE=enterprise_core.settings >> .env | |
| echo LICENSE_SEATS=999 >> .env | |
| - name: Run migrations | |
| working-directory: ${{ env.backend-directory }} | |
| run: | | |
| export $(grep -v '^#' .env | xargs) | |
| poetry run python manage.py migrate --settings=${{ env.enterprise-backend-settings-module }} | |
| - name: Start test server | |
| working-directory: ${{ env.backend-directory }} | |
| run: | | |
| export $(grep -v '^#' .env | xargs) | |
| poetry run python manage.py createsuperuser --noinput --settings=${{ env.enterprise-backend-settings-module }} | |
| nohup poetry run python manage.py runserver --settings=${{ env.enterprise-backend-settings-module }} & | |
| - name: Run tests with browser ${{ matrix.playwright-browser }} | |
| working-directory: ${{ env.enterprise-frontend-build-directory }} | |
| run: pnpm exec playwright test --project=${{ matrix.playwright-browser }} | |
| env: | |
| CI: true | |
| - uses: actions/upload-artifact@v4 | |
| if: always() | |
| with: | |
| name: enterprise-functional-tests-report-${{ matrix.playwright-browser }} | |
| path: | | |
| ${{ env.backend-directory }}/*.log | |
| ${{ env.enterprise-frontend-build-directory }}/tests/results/ | |
| ${{ env.enterprise-frontend-build-directory }}/tests/reports/ | |
| retention-days: 5 |